Before you begin

You can find documentation for creating custom modules your server at WHM > EasyApache > Help > Cpanel::Easy Framework POD, or and via command line at /scripts/easyapache --perldoc.

You can download a few sample custom modules below. These modules are not likely to be included in EasyApache in the near future.

Important: If you have problems building Apache with your custom modules, and you are unable to troubleshoot the problem, run /scripts/easyapache --skip-custom-optmods to build Apache and PHP without any custom modules. (Or, access the WHM equivalent found in EasyApache’s Help section).

Custom modules

Installing a custom module

To install a custom module:

1. Download and unzip it into /var/cpanel/easy/apache/custom_opt_mods/.
2. When logged into your server as root, you can install any module listed below by running the following commands. Be sure to replace $NAME.tar.gz with the filename of the module you wish to download:

wget http://easyapache.cpanel.net/optmods/$NAME.tar.gz
tar -C /var/cpanel/easy/apache/custom_opt_mods -xzf $NAME.tar.gz


Removing a custom module

In order to remove a custom module from the server, simply delete the files you created when you issued the above commands. The module will be removed from all future builds and the EasyApache interface.

Available modules

Warning: cPanel does not provide support for custom modules, including the ones linked below. The following modules are not developed by cPanel, Inc. Use them at your own risk.

mod_auth_mysql — This module allows you to authenticate users and authorize access through a MySQL database.

• Download: custom_opt_mod-mod_auth_mysql.tar.gz
• mod_auth_mysql project page.

mod_GeoIP — This module looks up the IP address of the client web user in the GeoIP database.

• Download: custom_opt_mod-mod_geoip.tar.gz
• mod_GeoIP project page

mod_python — This module embeds the Python interpreter into Apache, for faster Python applications.

• Download: custom_opt_mod-mod_python.tar.gz
• mod_python project page

GD with JIS-mapped Japanese font support — This module provides JIS-mapped Japanese font support for the GD library under PHP5.

• Download: custom_opt_mod-php5-gd_jis_mapped_japanese_font_support.tar.gz

Turkish locale patch for PHP5 — This module improves PHP5 support for Turkish.

• Download: custom_opt_mod-php5-turkish_locale_patch.tar.gz

suPHP PAM patch — This module allows you to use limits (/etc/security*.conf) with suPHP.

• Download: custom_opt_mod-suphp_pam_patch.tar.gz
• suPHP PAM patch information

Source: http://twiki.cpanel.net/twiki/bin/view/EasyApache3/CustomMods

Incoming search terms:

• easyapache how to make custom module (1)
• install easyapache on centos (1)
• linux download mod_python tar gz (1)

/scripts/restorepkg --force --skipres account.tar.gz

Incoming search terms:

• plesk 10 dnsmng: service /etc/init d/named failed to start (--start dns) (1)

1. gpm — mouse
2. mdmonitor — monitor raid devices
3. netfs — nfs, samba etc…
4. autofs — automount, nfs, cd etc…
5. kudzu — detect new hardware
6. restorecond — monitor selinux file context
7. mcstrans — mandatory access control selinux translation

There may be more, but if you’ve cleaned up your rpm packages, it would probably not exist.

Incoming search terms:

• plesk auto update 500 (1)

The package you are using while adding a domain has the “Dedicated IP” option enabled which searches for a free IP on the server and tries to assign to the every new domain you create. To overcome the issue, you will have to deselect the “Dedicated IP” option from the package which can be achieved via ssh.

Edit the package file located under /var/cpanel/packages

# vi /var/cpanel/packages/packagename

Search for

IP=y

and replace it with

IP=n

Save the file. You should now be able to create an account from WHM successfully.

Incoming search terms:

• cpanel centos [127 0 0 1] warning: sender rate (1)
• mailmng postfix plesk (1)

Can’t locate GDBM_File.pm in @INC (@INC contains: /usr/local/cpanel /usr/local/cpanel/perl /usr/local/cpanel/Cpanel/CPAN/overload/__Digest /usr/local/cpanel/build-tools/stubs /usr/lib/perl5/5.6.2/i686-linux /usr/lib/perl5/5.6.2 /usr/lib/perl5/site_perl/5.6.2/i686-linux /usr/lib/perl5/site_perl/5.6.2 /usr/lib/perl5/site_perl .) at /usr/local/cpanel/Cpanel/Locale/Utils.pm line 14.
Cpanel::Locale::Utils::BEGIN() called at GDBM_File.pm line 14
eval {…} called at GDBM_File.pm line 14
require Cpanel/Locale/Utils.pm called at /usr/local/cpanel/Cpanel/Locale.pm line 15
Cpanel::Locale::BEGIN() called at GDBM_File.pm line 14
eval {…} called at GDBM_File.pm line 14
require Cpanel/Locale.pm called at /usr/local/cpanel/Cpanel/StatsBar.pm line 11
Cpanel::StatsBar::BEGIN() called at GDBM_File.pm line 14
eval {…} called at GDBM_File.pm line 14
require Cpanel/StatsBar.pm called at (eval 74) line 1
main::BEGIN() called at GDBM_File.pm line 14
eval {…} called at GDBM_File.pm line 14
eval ‘use Cpanel::StatsBar ();’ called at cpanel.pl line 4974
main::modloader(‘StatsBar’) called at /usr/local/cpanel/Cpanel/LoadModule.pm line 10
Cpanel::LoadModule::loadmodule(‘StatsBar’) called at cpanel.pl line 4982
main::api2_preexec(‘StatsBar’, ‘rowcounter’) called at cpanel.pl line 1451
main::cpexectag(‘<?cp StatsBar::rowcounter(%,rowtype) rowcounter=mainstats ?>’) called at cpanel.pl line 4808
main::dotag(undef) called at cpanel.pl line 4691
main::cpanel_parseblock(‘SCALAR(0xa93311c)’) called at cpanel.pl line 4643
main::cpanel_parse(‘GLOB(0xa514874)’) called at cpanel.pl line 2878
main::doinclude(‘/usr/local/cpanel/base/frontend/x3/branding//index.html’, 0, 1) called at /usr/local/cpanel/Cpanel/Branding.pm line 95
Cpanel::Branding::Branding_include(‘index.html’) called at (eval 7) line 1
eval ‘Cpanel::Branding::Branding_include(@{$argref});’ called at cpanel.pl line 1660
main::exectag(‘<cpanel Branding=”include(index.html)”>’) called at cpanel.pl line 4808
main::dotag(undef) called at cpanel.pl line 4691
main::cpanel_parseblock(‘SCALAR(0x91a0700)’) called at cpanel.pl line 4643
main::cpanel_parse(‘GLOB(0xa4d4110)’) called at cpanel.pl line 1318

because there are some errors in PERL
resolve

/scripts/checkperlmodules
/scripts/perlinstaller --force Encode
/scripts/upcp --force

Incoming search terms:

• configure: error: openssl crypto headers not found centos (2)
• hosting controller http error 500 19 - internal server error (1)

(internal death while parsing ./frontend/x3/filemanager/live_fileop.xml) Tue Aug 11 19:04:14 2009 [30234] error: open3: exec of zip -r /home/fxhost/public_html/player/hsplaylist.xspf.zip hsplaylist.xspf index.html mhsplaylist.xspf failed at /usr/local/cpanel/Cpanel/SafeRun/Errors.pm line 21
Carp::croak(‘open3: exec of zip -r /home/fxhost/public_html/player/hsplayli…’) called at /usr/lib/perl5/5.6.2/IPC/Open3.pm line 230
IPC::Open3::_open3(‘open3′, ‘Cpanel::SafeRun::Errors’, ‘<&RNULL’, ‘GLOB(0xb0e4500)’, ‘GLOB(0xb0e4500)’, ‘zip’, ‘-r’, ‘/home/fxhost/public_html/player/hsplaylist.xspf.zip’, …) called at /usr/lib/perl5/5.6.2/IPC/Open3.pm line 291
IPC::Open3::open3(‘<&RNULL’, ‘GLOB(0xb0e4500)’, ‘GLOB(0xb0e4500)’, ‘zip’, ‘-r’, ‘/home/fxhost/public_html/player/hsplaylist.xspf.zip’, ‘hsplaylist.xspf’, ‘index.html’, …) called at /usr/local/cpanel/Cpanel/SafeRun/Errors.pm line 21
Cpanel::SafeRun::Errors::saferunallerrors(‘zip’, ‘-r’, ‘/home/fxhost/public_html/player/hsplaylist.xspf.zip’, ‘hsplaylist.xspf’, ‘index.html’, ‘mhsplaylist.xspf’) called at /usr/local/cpanel/Cpanel/Fileman.pm line 2251
Cpanel::Fileman::__ANON__(‘zip’, ‘-r’, ‘/home/fxhost/public_html/player/hsplaylist.xspf.zip’, ‘hsplaylist.xspf’, ‘index.html’, ‘mhsplaylist.xspf’) called at /usr/local/cpanel/Cpanel/Fileman.pm line 2286
Cpanel::Fileman::_handle_compress(‘return’, ‘ARRAY(0×9471054)’, ‘/home/fxhost/public_html/player/hsplaylist.xspf.zip’, ‘zip’) called at /usr/local/cpanel/Cpanel/Fileman.pm line 2875
Cpanel::Fileman::api2_fileop() called at (eval 9) line 1
eval ‘$dataref = [Cpanel::Fileman::api2_fileop(%CFG)];’ called at cpanel.pl line 4960
main::api2_exec(‘Fileman’, ‘fileop’, ‘HASH(0xb0e4488)’, ‘HASH(0x941a270)’) called at cpanel.pl line 1476
main::cpexectag(

This suggests installing it with

Code: yum install zip

If the zip is exit
Another suggests

Code:
chmod 755 /bin/{tar,gtar,gunzip,gzip,zcat}
chmod 755 /usr/bin/{zip,unzip,unrar}

Incoming search terms:

• cpanel setup a per-user php ini to allow open_basedir with suphp (2)
• cpanel file manager zip (1)
• cpanel zip public_html (1)
• how to play rar files within xspf format (1)
• server centos cpanel compression (1)

* Check files with permission 755

root@master [~]# find $x -type f -perm 755

* Check files with permission 777

root@master [~]# find $x -type f -perm 777

* Check diretcory with permissions 777

root@master [~]# find $x -type d -perm 777

* Check diretcory with permissions 000

root@master [~]# find $x -type d -perm 000

You can change the permissions to the value you you want to search.

Incoming search terms:

• Exim optimization (CPanel) (2)
• directadmin user System Quotas (1)
• find permissions 000 (1)
• how to check file permissions of present working directory (1)
• network programming permissions (1)

1. Determine the size of the new swap file in megabytes and multiply by 1024 to determine the number of blocks. For example, the block size of a 64 MB swap file is 65536.
2. At a shell prompt as root, type the following command with count being equal to the desired block size:

   dd if=/dev/zero of=/swapfile bs=1024 count=65536

3. Setup the swap file with the command:

   mkswap /swapfile

4. To enable the swap file immediately but not automatically at boot time:

   swapon /swapfile

5. To enable it at boot time, edit /etc/fstab to include the following entry:

   /swapfile swap swap defaults 0 0

   The next time the system boots, it enables the new swap file.

6. After adding the new swap file and enabling it, verify it is enabled by viewing the output of the command
   cat /proc/swaps or free.

Incoming search terms:

• plesk swap file (2)
• vps centos free swap error (2)
• create swap on linux (1)
• directadmin swap (1)
• plesk create swap file (1)
• pure-ftpd relocation error kloxo (1)
• re-initializing vps (1)
• swap file relocation in debian (1)

If you are running tomcat on a cpanel server here is what you can do to help you from losing your tomcat instance:

• backup; newer cpanel versions backup apache, configs, etc. but they will not care about tomcat. This means it is your job to save the tomcat files. Here are some important folders you should save:
  /usr/local/jdk – this is a link to the real jdk used on the system (jdk1.5.0_05 or jdk1.6.0_02 for ex.); save the real jdk also, just in case…
  /usr/local/jakarta/tomcat - this will contain all your tomcat configs, apps, logs, etc.
  /usr/sbin/starttomcat and /usr/sbin/stoptomcat – scripts used to start and stop tomcat (in case you made local changes, memory tunings, etc.)

The files above can be lost during the rebuild, and it is important to have them on hand to restore tomcat if it fails starting after the apache build. For example last time this happened for us we had to fix the /usr/local/jdk link to point to the proper jdk (we use 1.5 and cpanel changed the link to 1.6) and also the startup scripts that contained various local customizations were obviously overwritten  .

Hopefully this information will be useful for other people, and hopefully you will see it before running easyapache

Incoming search terms:

• build tomcat fails easyapache whm (2)
• apache rebuilt (1)
• tomcat cpanel (1)
• tomcat apps to subdomains cpanel whm (1)
• how to rebuild network in cpanel (1)
• cpanel your tomcat (1)
• cpanel tomcat failed to start (1)
• cpanel tomcat (1)
• centos unable to manage service by websrvmng (1)
• tomcat easyapache (1)

Secure cPanel/WHM and the Root User on VDS:

Checking for formmail:

Form mail is used by hackers to send out spam email, by relay and injection methods. If you are using matts script or a version of it, you may be in jeopardy.

Command to find pesky form mails:

find / -name "[Ff]orm[mM]ai*"

CGIemail is also a security risk:

find / -name "[Cc]giemai*"

Command to disable form mails:

chmod a-rwx /path/to/filename

(a-rwx translates to all types, no read, write or execute permissions).

(this disables all form mail)

If a client or someone on your vps installs form mail, you will have to let them know you are disabling their script and give them an alternative.

Root kit Checker (rkhunter or chkrootkit)

Check for a root kits via a cron job, by doing this you will regularly check if your server is comprised, and you will be sent regular reports.

To install chkrootkit, login to the server as root and on the command line interface type:

cd /root/
wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
tar xvzf chkrootkit.tar.gz
cd chkrootkit-0.47
make sense

To run chkrootkit, type the following on the CLI:

/root/chkrootkit-0.47/chkrootkit

To ensure the highest level of security setup a cronjob which emails you the results on a regular basis.
Setup Email on Root Login (to detect breaches)

If an unauthorized person gains access to root, you want to be notified – you can do so by doing the following while logged into root:

cd /root
vi .bash_profile

Add the following line:

echo 'ALERT - Root Shell Access on:' `date` `who` | mail -s "Alert: Root Access from `who | awk '{print $6}'`" your@email.com

Where your@email.com is your email address.

Save an exit vi: :wq

To change the SSH Legal Message (displayed when you login via SSH), edit /etc/motd to display the message you wish to show.
Securing WHM and cPanel:

By default cPanel/WHM is not setup securely and efficiently, so you will want to optimize the cPanel/WHM settings by doing the following:

Go to: Server Setup -> Tweak Settings

Under Domains tick:
· Prevent users from parking/adding common internet domains (hotmail.com, aol.com, etc)

Under Mail tick:
· Attempt to prevent pop3 connection floods
· Default catch-all/default address behavior for new accounts – set this to FAIL

Under System tick:
· Use jailshell as default on new accounts

Go to: Server Setup -> Tweak Security
· Enable php open_basedir protection
· Enable mod_userdir protection
· Disable compilers for unprivileged users

Go to: Server Setup -> Shell Fork Bomb Protection
· Enable shell bomb/memory protection

When creating reseller packages, be sure to:
· Disallow creation of packages with shell acces
· Disallow creation of packages with full root access

Go to: Service Configuration -> FTP Configuration
· Disable anonymous FTP access

Go to: Account functions -> Manage Shell Acess
· Disable shell access for all users (except yourself)

Go to: MySQL -> Manage Root Password
· Change Root Password for MySQL

Go to: Security -> Quick Security Scan for Trojan Horses, and make sure you don’t have any of the following infected:

· /sbin/depmod
· /sbin/insmod
· /sbin/insmod.static
· /sbin/modinfo
· /sbin/modprobe
· /sbin/rmmod

Update OS and Software:

If you are running cPanel:
· Update cPanel: /scripts/upcp
· Update Apache: /scripts/easyapache

If you are not running cPanel:
· Update OS and software: yum upgrade
General OS Security (do not need to be running cPanel):

Restict SSH access:
For improved security

Parts of this article were obtained from forum postings on WHT.

Incoming search terms:

• dedicated server optimization and security centos 2012 (2)
• centos security breach (1)
• vitual private server optimization and security (1)
• securing vps (1)
• secure vps server cpanel (1)
• optimize cpanel vps (1)
• open_basedir vps centos cpanel accounts (1)
• free demo cpanel vps optimized x3 (1)
• formmail disabled by administrator cPanel (1)
• chkrootkit (1)